Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa
File: LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa (raw, json)
Hash identifier: H1OSqqIXQ8L0e8zdTbz2Q5MNnYt8XB/ESxFOwFA6jVY=
Subject key identifier: 2D:7A:09:D6:32:D1:64:FA:6B:5B:2F:92:EA:06:5A:D8:29:CA:DC:73
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 11A5
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa
Signing time: Fri 01 Sep 2023 10:20:08 +0000
ROA not before: Fri 01 Sep 2023 10:20:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131636
IP address blocks: 103.130.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4517 (0x11a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 1 10:20:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2D7A09D632D164FA6B5B2F92EA065AD829CADC73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:03:fe:90:0a:60:ef:5d:62:41:f3:1c:a9:
14:7b:73:0a:3e:39:f7:64:0c:33:99:31:b1:90:66:
71:07:63:fe:e5:0b:29:83:10:ce:04:cd:97:af:2f:
fd:b5:5b:a3:d0:16:56:c6:4d:c9:b4:f2:d9:2c:53:
b1:3d:27:c8:22:9d:ba:e3:67:95:14:a3:59:c1:1a:
73:22:f9:ce:cc:ed:47:54:2e:92:c8:0c:17:9c:e4:
2d:73:ed:25:fd:5e:a8:b7:66:7a:3e:66:6c:3a:f0:
33:93:2a:f2:18:c7:01:a6:03:5c:87:6a:06:23:1c:
4e:23:64:9b:7a:db:e3:6c:cf:64:53:01:ba:22:86:
c0:ac:30:43:5c:03:95:8b:f1:4d:c6:a2:fa:d1:92:
18:5a:95:b5:81:71:b2:8f:d6:19:e9:5a:d0:d5:e4:
45:4c:c3:15:5d:80:c5:1a:ea:ee:66:f4:b3:f4:2c:
1f:1a:cf:12:6d:0a:79:a2:9b:0f:d0:2e:71:6b:f9:
c2:6c:14:40:d3:45:b8:a4:1f:4e:27:60:8b:f8:b8:
3a:78:b4:1d:e0:cb:8d:fb:76:0e:05:11:e5:0d:96:
92:cf:5b:66:d7:b6:63:d0:ab:be:c4:1d:70:71:c4:
e4:c4:f9:20:70:e4:bf:3a:95:fd:8b:3a:d5:66:f5:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:09:D6:32:D1:64:FA:6B:5B:2F:92:EA:06:5A:D8:29:CA:DC:73
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.124.0/22
Signature Algorithm: sha256WithRSAEncryption
45:81:df:fc:19:bf:0b:37:86:28:56:b4:88:a1:30:e8:11:3a:
59:56:b8:1e:b8:34:b6:c6:ed:a3:39:fc:b3:cd:56:00:06:eb:
da:63:cc:0c:39:8b:84:cf:cd:10:c0:f5:8d:23:31:4b:27:a8:
81:bc:82:6b:fd:9d:16:11:cb:cd:db:ee:aa:dd:3b:d7:a3:e5:
d9:82:52:90:ae:df:d3:b0:bc:1c:44:22:7a:00:25:1b:b4:16:
07:9f:df:c3:16:ca:ca:a8:a9:e0:f5:76:08:43:76:7b:bf:4d:
dd:ec:6b:15:e9:a4:88:d2:20:af:76:bf:ec:78:96:07:01:26:
c2:f0:0e:89:b6:72:49:8d:54:e5:3f:dc:68:78:da:ec:ac:92:
b0:67:35:2e:77:50:4b:af:1d:e0:9c:bb:e1:03:27:aa:a8:b4:
74:72:78:3b:89:7a:d4:f6:4c:62:2d:5e:97:05:b4:5f:77:1c:
26:2f:e7:d2:36:3c:15:34:11:3f:b4:e4:0b:85:36:f8:d6:c1:
56:90:03:0e:8c:f3:5d:75:65:18:2e:07:3d:6a:8c:b2:73:72:
69:7f:38:9e:93:17:ba:f3:aa:9c:f2:72:a7:63:04:a0:40:c1:
9c:b2:e4:f7:5b:8f:35:c8:9e:6b:9e:19:13:41:f4:5c:e9:55:
61:77:5d:4e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE
MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yMzA5MDEx
MDIwMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJEN0EwOUQ2MzJEMTY0
RkE2QjVCMkY5MkVBMDY1QUQ4MjlDQURDNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxNgP+kApg711iQfMcqRR7cwo+OfdkDDOZMbGQZnEHY/7lCymD
EM4EzZevL/21W6PQFlbGTcm08tksU7E9J8ginbrjZ5UUo1nBGnMi+c7M7UdULpLI
DBec5C1z7SX9Xqi3Zno+Zmw68DOTKvIYxwGmA1yHagYjHE4jZJt62+Nsz2RTAboi
hsCsMENcA5WL8U3GovrRkhhalbWBcbKP1hnpWtDV5EVMwxVdgMUa6u5m9LP0LB8a
zxJtCnmimw/QLnFr+cJsFEDTRbikH04nYIv4uDp4tB3gy437dg4FEeUNlpLPW2bX
tmPQq77EHXBxxOTE+SBw5L86lf2LOtVm9R1lAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQULXoJ1jLRZPprWy+S6gZa2CnK3HMwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1
CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v
d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9MWG9KMWpMUlpQcHJXeS1TNmda
YTJDbkszSE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4J8
MA0GCSqGSIb3DQEBCwUAA4IBAQBFgd/8Gb8LN4YoVrSIoTDoETpZVrgeuDS2xu2j
OfyzzVYABuvaY8wMOYuEz80QwPWNIzFLJ6iBvIJr/Z0WEcvN2+6q3TvXo+XZglKQ
rt/TsLwcRCJ6ACUbtBYHn9/DFsrKqKng9XYIQ3Z7v03d7GsV6aSI0iCvdr/seJYH
ASbC8A6JtnJJjVTlP9xoeNrsrJKwZzUud1BLrx3gnLvhAyeqqLR0cng7iXrU9kxi
LV6XBbRfdxwmL+fSNjwVNBE/tOQLhTb41sFWkAMOjPNddWUYLgc9aoyyc3Jpfzie
kxe686qc8nKnYwSgQMGcsuT3W481yJ5rnhkTQfRc6VVhd11O
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org